Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
File:                     0xyRLQcbkADlUgiGuwWr0YmnAc8.roa (raw, json)
Hash identifier:          EzjTj+NZKHGj8NpuUrqMEiHVEt9h6ME92L3jW12MrNM=
Subject key identifier:   D3:1C:91:2D:07:1B:90:00:E5:52:08:86:BB:05:AB:D1:89:A7:01:CF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02E8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
Signing time:             Sun 31 Mar 2024 01:35:47 +0000
ROA not before:           Sun 31 Mar 2024 01:35:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.183.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=D31C912D071B9000E5520886BB05ABD189A701CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:23:9c:b1:4c:d9:f7:d2:73:53:23:2f:5c:
                    74:f4:51:ab:51:ce:18:32:e2:88:a7:b1:e8:55:75:
                    3e:f5:1c:48:9a:45:af:50:11:b3:c4:8c:51:ed:08:
                    72:e2:36:96:ec:7b:b8:1f:bc:d8:79:76:8a:7f:ee:
                    78:47:a5:4e:73:aa:1b:83:20:2b:c0:a9:17:83:c6:
                    d0:53:e2:ad:a6:cc:f9:bb:d0:fe:ac:d5:a8:da:1a:
                    2d:47:ef:ba:d5:d7:af:4d:3b:3b:c0:f7:57:b5:ae:
                    91:50:65:11:cd:11:c8:73:bf:1c:f2:e0:11:58:68:
                    77:34:58:5a:d6:23:70:8d:95:b4:55:81:a8:0e:11:
                    29:78:23:65:4d:3c:d5:a6:75:82:12:db:67:01:52:
                    17:af:40:4f:e9:47:0b:02:73:55:60:ef:fd:7f:29:
                    39:7b:88:f2:99:4f:ab:89:5c:1a:83:c4:e1:f4:8d:
                    f7:0a:47:82:9d:e5:a1:5d:7e:e2:ca:db:15:da:ad:
                    82:48:80:17:18:4b:01:d7:30:d9:e1:e4:9d:67:ab:
                    06:14:cd:38:9f:54:c4:82:b2:64:d8:63:6b:78:a5:
                    04:e7:0d:2b:ab:ca:97:a0:7b:ba:c3:f7:99:5e:ee:
                    2b:ca:bb:81:b4:25:0c:92:a5:55:f2:b5:64:c4:9a:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1C:91:2D:07:1B:90:00:E5:52:08:86:BB:05:AB:D1:89:A7:01:CF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:93:d1:e3:80:39:87:e9:76:c6:cc:41:c5:2b:9d:25:99:12:
         23:1f:c5:2b:3f:6d:49:e1:70:16:c2:d6:99:b0:7f:83:36:f4:
         a6:80:f0:5e:b7:03:4f:14:e0:11:aa:40:54:45:db:da:e1:45:
         cd:43:38:6f:44:3c:46:3a:03:ec:77:a7:0e:30:e3:2c:0f:2d:
         f8:35:7f:4a:eb:6c:1c:63:b4:82:a7:24:d5:8f:b2:f8:ba:7a:
         09:f0:ea:66:eb:78:1c:b4:6b:76:67:35:f1:95:e2:56:59:69:
         f3:53:74:7f:19:9e:aa:e4:f8:dc:9d:d1:11:65:f4:d1:65:a3:
         69:a8:dc:04:32:25:1d:90:38:d2:c8:7b:66:88:d2:20:db:57:
         a6:ee:76:01:26:4d:4c:be:bb:40:98:3c:27:d1:a5:12:23:08:
         5d:64:47:80:cb:d3:8b:4e:33:b8:78:ac:9b:43:81:bb:e1:f6:
         fb:26:0f:e0:73:89:32:f3:fe:f1:47:e2:f9:cf:8a:4b:7e:b8:
         1a:8e:b5:9e:c7:ac:c1:26:02:49:72:0a:20:a7:dc:33:ee:35:
         93:3c:e2:6e:da:61:2c:24:ed:bb:2f:58:d0:d5:0c:4d:0c:47:
         d0:40:2c:b3:c8:57:a5:58:c2:79:2c:1c:66:1a:81:96:60:52:
         17:ad:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org